$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft File: 3GiS42IN0PH9YpguEY4pdX3Iyz0.mft (raw, json) Hash identifier: ZNXV4KgsRYO/UCXxpW29GQd8nNHupRF9n7YSrEsVkOk= Subject key identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10 Authority key identifier: DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D Certificate issuer: /CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Certificate serial: 169A Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft Manifest number: 1630 Signing time: Thu 03 Jul 2025 14:42:28 +0000 Manifest this update: Thu 03 Jul 2025 14:42:28 +0000 Manifest next update: Thu 03 Jul 2025 20:42:28 +0000 Files and hashes: 1: 2n9wS1M7syH7x5xe_mVyu3n8ym0.roa (hash: bjySGr8ntkqnZeQot/ZGyf/Ph80Ivr4s9McXO3XAliI=) 2: 3GiS42IN0PH9YpguEY4pdX3Iyz0.crl (hash: 3YN/Phy9WKetHvgomhI6ym+UH1D4AR6pqv8wXK3cszM=) 3: 8bIf5okmvQcgZEFb1zMEtioo9Bo.roa (hash: WeqdQC4BErrU6tuOjQZRZJ8aznqsoiTS20wXvnYplR4=) 4: CsbL2zc06qlI5qiGhv8iWDSiHpo.roa (hash: WRx0mQaFMO/zcpfEjAPiBz7zQ4TDgEAoJmPOhrxqLqM=) 5: DLh317d13UWo5fd34N6-2Qm0P1Q.roa (hash: npIp+JCP+LubbpwNdo0aDF8nf8uL3RjKYIP9e8mDjgU=) 6: GzAP2avY_CVkjzL-5ENvc4ng1q4.roa (hash: eb/EnvkdTSlL/AQOxQFE8DanViGWE8idIcezhVAx8kA=) 7: U4oQnHmqzev6Gj7VQCG9Vg1IGKc.roa (hash: ljZleBf1aFuqSDR+p0LmN1murZ6t7/ag946nBUiY8mc=) 8: XhUoeoz9VJqqIq46N3RDeT_yZEE.roa (hash: tXItQfPXQIdUmohhpDIXLj/1/DGqLBI7gNct3iexofo=) 9: aGbshMTCsokWooKVA9PeMNUJ-G8.roa (hash: 16o5mskag/BXbkBmolzej0Dyn4GYuPSqvKt9AV5x/D8=) 10: cHRo-hr5vmKf2efQVzb9SlGhKUA.roa (hash: p4BukhfF7uVeCeNM7A4KiU5uirEPzlriOAbTujzkRV0=) 11: gFQ0V21vJzULIhAjNC22HYqbNls.roa (hash: wsQ65k8e4WOz3445/AQgq5MBeH/Q0sqHWQ6ayG0tSGI=) 12: qedhA0bOyAoTgXRIgruj8mqK0ZA.roa (hash: vcTv5onryYbmeDdxkNmK6VVWOUllVzdo9t8eDYksb1g=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5786 (0x169a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC6892E3620DD0F1FD62982E118E29757DC8CB3D Validity Not Before: Jul 3 14:42:28 2025 GMT Not After : Apr 9 06:41:24 2026 GMT Subject: CN=AEC4B33917814BC00A65EB9CEC3E1DFD8D383010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:79:0f:fa:67:80:fa:5d:2e:95:a1:98:8c: 49:15:6b:7c:b6:6b:21:fc:03:e9:69:75:27:1f:63: 35:4e:93:f0:74:1c:93:1e:dd:35:8e:2f:e5:d6:40: 1b:5f:12:fd:cc:78:a9:5b:c2:74:89:e7:af:f8:c3: 18:e2:d3:e7:b8:0d:c6:63:2d:ca:c4:ca:b4:6b:ea: 4b:54:e6:6d:a9:02:d4:74:c0:a8:da:2a:a6:de:d8: 0e:b3:9b:c2:ed:0f:e9:68:f6:09:f8:41:6a:7a:4d: 56:b3:8a:db:e0:be:ad:fb:85:b1:e0:0b:88:d3:bb: 26:1d:48:96:09:cb:ee:cb:6f:14:5f:4d:dd:fc:ec: 98:94:32:8e:8e:00:de:15:eb:d0:3a:2d:55:cf:a9: 09:2a:8d:5a:08:1e:1a:72:cd:b9:cc:49:e9:79:22: 61:c1:79:56:2b:1f:15:2b:20:d5:96:30:be:1e:d1: 92:11:20:52:24:3a:e4:c1:6b:a0:3d:4d:76:f9:6e: d9:94:40:f7:43:58:86:f3:2d:ca:8d:97:13:23:18: 9a:8f:af:c2:b3:83:40:46:86:39:f9:3a:11:4d:b5: 41:56:73:5c:54:d9:44:1c:4e:72:d5:5f:8a:34:63: 31:84:47:5d:8d:92:52:f7:c0:b7:80:8a:0b:02:88: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C4:B3:39:17:81:4B:C0:0A:65:EB:9C:EC:3E:1D:FD:8D:38:30:10 X509v3 Authority Key Identifier: keyid:DC:68:92:E3:62:0D:D0:F1:FD:62:98:2E:11:8E:29:75:7D:C8:CB:3D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3GiS42IN0PH9YpguEY4pdX3Iyz0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2309/3GiS42IN0PH9YpguEY4pdX3Iyz0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e2:0d:03:da:8f:52:38:71:b2:4f:58:2c:a7:39:6f:ae:5f: ee:c1:a4:60:1f:73:f8:b1:1e:51:d5:11:c7:60:09:de:81:50: db:15:f0:e9:4f:b6:73:67:10:bf:41:62:3f:fd:78:6f:3c:53: 3e:e3:13:21:67:84:fb:4a:f5:d2:0d:bc:40:e8:0b:52:8f:3a: ea:50:2d:10:97:da:1d:85:29:32:32:13:02:dc:83:3f:de:70: 9d:a1:e9:f1:b7:f8:d7:3c:6e:63:81:83:44:8c:89:ec:ae:3e: 08:d0:4c:19:52:38:ec:87:72:57:f3:0e:3f:ea:80:15:ca:88: 68:ef:3b:7d:c1:38:65:f7:02:73:42:cc:d1:45:53:b2:99:ae: 29:26:3d:ce:2a:8a:06:81:4b:75:95:7d:7f:c6:99:5e:0c:4e: 19:fa:24:f7:42:8c:48:07:fd:2a:df:9b:93:8d:ac:21:8b:e1: 65:0c:0e:51:14:55:18:56:3f:f5:9b:c3:d4:a6:6a:d4:62:87: 71:c8:1f:4d:27:7a:ae:4c:fd:80:c3:07:ff:8c:24:19:6c:70: bd:2f:65:2b:b5:bf:f4:51:22:a0:b2:ef:a9:2b:d5:49:7a:75: e4:7c:3a:73:45:07:e7:f3:ff:05:66:ab:f8:39:62:8d:ae:83: f2:d4:b7:ef -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICFpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREM2 ODkyRTM2MjBERDBGMUZENjI5ODJFMTE4RTI5NzU3REM4Q0IzRDAeFw0yNTA3MDMx NDQyMjhaFw0yNjA0MDkwNjQxMjRaMDMxMTAvBgNVBAMTKEFFQzRCMzM5MTc4MTRC QzAwQTY1RUI5Q0VDM0UxREZEOEQzODMwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC563kP+meA+l0ulaGYjEkVa3y2ayH8A+lpdScfYzVOk/B0HJMe 3TWOL+XWQBtfEv3MeKlbwnSJ56/4wxji0+e4DcZjLcrEyrRr6ktU5m2pAtR0wKja Kqbe2A6zm8LtD+lo9gn4QWp6TVazitvgvq37hbHgC4jTuyYdSJYJy+7LbxRfTd38 7JiUMo6OAN4V69A6LVXPqQkqjVoIHhpyzbnMSel5ImHBeVYrHxUrINWWML4e0ZIR IFIkOuTBa6A9TXb5btmUQPdDWIbzLcqNlxMjGJqPr8Kzg0BGhjn5OhFNtUFWc1xU 2UQcTnLVX4o0YzGER12NklL3wLeAigsCiJ3JAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUrsSzOReBS8AKZeuc7D4d/Y04MBAwHwYDVR0jBBgwFoAU3GiS42IN0PH9Ypgu EY4pdX3Iyz0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjMw OS8zR2lTNDJJTjBQSDlZcGd1RVk0cGRYM0l5ejAuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLzNHaVM0MklOMFBIOVlwZ3VFWTRwZFgzSXl6MC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIzMDkvM0dpUzQySU4wUEg5 WXBndUVZNHBkWDNJeXowLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAE/iDQPaj1I4cbJPWCynOW+uX+7BpGAfc/ixHlHVEcdgCd6BUNsV8OlPtnNn EL9BYj/9eG88Uz7jEyFnhPtK9dINvEDoC1KPOupQLRCX2h2FKTIyEwLcgz/ecJ2h 6fG3+Nc8bmOBg0SMieyuPgjQTBlSOOyHclfzDj/qgBXKiGjvO33BOGX3AnNCzNFF U7KZrikmPc4qigaBS3WVfX/GmV4MThn6JPdCjEgH/Srfm5ONrCGL4WUMDlEUVRhW P/Wbw9SmatRih3HIH00neq5M/YDDB/+MJBlscL0vZSu1v/RRIqCy76kr1Ul6deR8 OnNFB+fz/wVmq/g5Yo2ug/LUt+8= -----END CERTIFICATE-----Generated at Thu Jul 3 17:57:34 2025 by rpki-client